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A  quaternion-based  attitude  control  system  is  developed  for  the  X-33  in  the  ascent  flight  phase.  A  nonlinear 
control  law  commands  body-axis  rotation  rates  that  align  the  angular  velocity  vector  with  an  Euler  axis  defining  the 
axis  of  rotation  that  will  rotate  the  body-axis  system  into  a  desired-axis  system.  The  magnitudes  of  the  commanded 
body  rates  are  determined  by  the  magnitude  of  the  rotation  error.  The  commanded  body  rates  form  the  input  to  a 
dynamic  inversion-based  adaptive/reconfigurable  control  law.  The  indirect  adaptive  control  portion  of  the  control 
law  uses  online  system  identification  to  estimate  the  current  control  effectiveness  matrix  to  update  a  control 
allocation  module.  The  control  allocation  nominally  operates  in  a  minimum  deflection  mode;  hovvever,  if  a  fault  is 
detected,  it  can  operate  in  a  null-space  injection  mode  that  excites  and  decorrelates  the  effectors  without  degrading 
the  vehicle  response  to  enable  online  system  identification.  The  overall  system  is  designed  to  provide  fault  and 
damage  tolerance  for  the  X-33  on  ascent.  The  baseline  control  law  is  based  on  a  full  envelope  d^ign  philosophy 
and  eliminates  trajectory-dependent  gain  scheduling  that  is  typically  found  on  this  type  of  vehicle.  Results  are 
shown  to  demonstrate  the  feasibility  of  the  approach. 
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Nomenclature 

aerospike  engine  quadrants 

command  limiting  gain  growth/decay  constant 

control  effectiveness  matrix 

direction  cosine 

desired  control  variable  rate 

eigenvector 

force  vector 

moment  vector 

regressor  matrix  containing  measured  control 
deflections  over  finite  horizon 
inertia  tensor 
cost  function 

bandwidth  of  desired  dynamics 

principal  attitude  error  gain 

roll,  pitch,  and  yaw  moments 

covariance  matrices 

parameter  vector 

roll,  pitch,  and  yaw  velocities 

scalar  quaternion  component 

vector  part  of  quaternion 

quaternion 

rotation  matrix 

Laplace  transform  operator 

vector  of  uniformly  distributed  random  variables 

diagonal  scaling  matrix  for  command  distribution 

weighting  vector  on  control  deflections 

measurement  noise 

vector  of  measured  accelerations  over  finite  horizon 

angle  of  attack,  sideslip  angle 

flight  control  system  update  rate 

control  effector  deflection  vector 

most/least  restrictive  control  range  limits 

control  preference  vector 

vector  of  effector  rate  limits 
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slack  variable  vector 
parameter  vector  to  be  estimated 
principal  attitude  error 
vehicle  angular  velocity  vector 
1-norm  of  a  vector 
estimate 


I.  Introduction 

AS  a  subscale  technology  demonstrator  for  a  quick-turnaround, 
reusable  launch  vehicle,  the  X-33  (Fig.  1)  is  an  autonomous, 
hypersonic  vehicle  with  two  linear  aerospike  engines  and  eight 
aerodynamic  control  surfaces:  inner/outer  elevens,  rudders,  and 
flaps.  The  vehicle  takes  off  vertically  like  a  rocket  and  lands 
horizontally  like  an  airplane.  The  unpiloted  vehicle  has  a  flight 
envelope  that  spans  up  to  30  miles  in  altitude  and  Mach  9  in 
speeds. 

Adaptive/reconfigurable  flight  control  technologies  have  been 
maturing  over  the  past  decade.  A  number  of  different  approaches 
have  been  developed,  and  some  have  been  tested  on  fighter-type 
aircraft.  An  indirect  adaptive  control  approach^  was  demonstrated 
on  the  VISTA-F-16  in  1995,  where  a  simulated  failure  of  a  left  hor¬ 
izontal  tail  was  induced  on  approach  and  the  vehicle  landed  without 
incident.  More  recently,  the  X-36  tailless  remotely  piloted  vehicle 
successfully  demonstrated  a  direct  adaptive  control  system  where  a 
neural  network  was  used  to  regulate  adaptively  the  inversion  error 
of  a  baseline  dynamic  inversion  control  law.^  The  U.S.  Air  Force 
Reconfigurable  Systems  for  Tailless  Fighter  Aircraft  program  de¬ 
veloped  a  number  of  direct  and  indirect  adaptive  control  algorithms 
for  tailless  fighter  aircraft.^*^  In  general,  indirect  adaptive  control 
systems  require  online  identification  of  the  model  parameters  that 
are  used  for  the  online  computation  of  a  control  law.  Direct  adap¬ 
tive  control  schemes  do  not  require  explicit  identification  of  model 
parameters;  instead,  they  generate  signals  that  attempt  to  cancel  the 
effects  of  modeling  error  on  control  laws  that  were  designed  using 
nominal  or  unfailed  models  of  the  controlled  element. 

Transitioning  adaptive  control  technology  to  reusable  launch  ve¬ 
hicles  (RLVs)  such  as  the  X-33  has  the  potential  of  providing  benefits 
demonstrated  on  fighter  aircraft  to  this  new  class  of  vehicle.  Benefits 
include  improved  reliability  through  fault  and  damage  tolerance  to 
effector  failures  and  faster  turnaround  times  through  reduced  flight 
control  redesign  times.  The  current  X-33  control  system  is  essen¬ 
tially  a  trajectory  dependent  gain-scheduled  proportional-integral- 
derivative  architecture.^  The  system  is  reconfigurable  in  that  it  is 
designed  to  accommodate  a  predefined  set  of  failures  such  as  engine- 
out,  again  using  gain  scheduling.  Adaptive/reconfigurable  control  is 
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Fig.  1  X-33  RLV. 

different  in  that  the  system  adapts  to  failures  (possibly  unforeseen) 
online  in  real  time. 

This  paper  will  discuss  an  indirect  adaptive  control  system  that 
is  built  around  a  baseline  dynamic  inversion  control  law.  Dynamic 
inversion  control  laws  require  the  use  of  a  control  mixer  or  control 
effector  allocation  algorithm  when  the  number  of  control  effectors 
exceeds  the  number  of  controlled  variables.  This  is  because  a  small 
number  of  desired  moment  or  acceleration  commands  are  calculated 
and  a  large  number  of  control  effectors  may  be  used  to  achieve  the 
desired  command.  It  is  quite  common  that  the  desired  commands 
can  be  achieved  in  many  different  ways,  and  so  control  allocation 
approaches  are  used  to  provide  consistent  and  unique  solutions  to 
such  problems.  The  control  allocation  relies  on  accurate  knowledge 
of  the  control  derivatives.  Under  failure  or  damage  conditions,  the 
control  derivatives  can  be  altered  dramatically.  When  control  deriva¬ 
tives  are  identified  and  updated  information  is  supplied  to  the  control 
allocation  block,  the  performance  of  the  entire  system  can  be  im¬ 
proved.  A  fault-detection  scheme  is  used  to  trigger  an  online  system 
identification  algorithm  that  is  used  to  estimate  control  effectiveness 
when  faults  are  detected.  The  control  system  described  in  this  paper 
is  implemented  in  C  and  interfaced  with  the  MAVERIC  simulation 
of  the  X-33. 


11.  Baseline  Attitude  Control  System 

During  the  ascent  flight  phase,  the  X-33  control  system  must 
track  attitude  commands  generated  by  the  guidance  system.  The 
use  of  a  dynamic  inversion  control  law  to  control  the  Euler  angles 
of  this  vehicle  on  ascent  is  precluded  because  of  the  requirement 
to  compute  the  Euler  angle  rates.  The  pitch  attitude  of  the  vehicle 
changes  by  more  than  90  deg  throughout  this  flight  phase,  which 
brings  the  well-known  singularity  problems  inherent  in  the  compu¬ 
tation  of  Euler  angle  rates  into  play.  To  circumvent  this  problem,  a 
quaternion-based  control  law  is  developed  and  coupled  with  a  dy¬ 
namic  inversion-based  body-axis  rate  command  system.  The  system 
works  by  determining  the  axis  of  rotation  that  will  take  the  vehi¬ 
cle’s  body-axis  system  directly  to  a  desired-axis  system  in  a  single 
rotation.  This  axis  is  called  an  Euler  axis,  and  all  vectors  that  lie  on 
it  have  an  interesting  property  in  that  they  have  the  same  compo¬ 
nents  in  the  body- axis  system  as  they  do  in  the  desired-axis  system. 
This  characteristic  arises  from  all  rotation  matrices  R  having  one 
eigenvalue  equal  to  1  and  the  Euler  axis  being  defined  by  the  eigen¬ 
vector  associated  with  this  eigenvalue;  thus,  Rei  =  ^i.  Therefore,  it 
is  easy  to  see  that  the  Euler  axis  has  the  same  components  in  the 
transformed  system  as  it  does  in  the  original  coordinate  frame.  A 
set  of  body-axis  rate  commands  is  then  generated  that  are  aligned 
with  a  body-axis  to  desired  Euler  axis.  The  magnitude  of  the  com¬ 
manded  rates  is  a  function  of  the  magnitude  of  the  scalar  angular 
misalignment  <t>  between  the  body-  and  desired-axis  systems. 

In  general  we  define  a  quaternion  as  having  scalar  and  vector  parts 

q  =  qo-^  g  =  gQ-i-[q\  qi  ^3]  (1) 

with  a  constraint  on  the  unit  norm 


q%2d  =  cos(0/2), 


'Cl  sin(<^/2)' 


qb2d  ~ 


C2  sin(0/2) 


C3  sin(0/2) 


(3) 


where  Ci,  C2,  and  C3  are  the  direction  cosines  of  the  Euler  axis 
relative  to  the  body-axis  reference  frame. 

The  guidance  system  generates  attitude  commands  referenced 
with  respect  to  a  plumbline-axis  system.  The  plumbline-axis  sys¬ 
tem  is  a  vehicle  carried  frame  that  is  attached  to  the  vehicle  center 
of  gravity,  whose  z  axis  points  toward  the  center  of  the  Earth  and 
whose  X  axis  is  oriented  along  the  launch  azimuth  with  the  y  axis 
completing  the  right-handed  coordinate  system.  Two  quaternions 
are  used  to  compute  the  body  quaternion  to  desired  quaternion,  the 
plumbline  quaternion  to  desired  quaternion  qp2d  and  the  plumbline 
quaternion  to  body  quaternion  qp2b  •  The  body  quaternion  to  desired 
quaternion  as  defined  can  be  calculated  using  quaternion  multipli¬ 
cation  and  inversion  rules®: 


qb2d  —  qp2dqp2b  (4) 

The  vector  part  of  qb2d  yields  the  direction  of  the  Euler  axis  in  body- 
axis  coordinates.  Quaternion  multiplication  and  inversion  is  a  more 
computationally  tractable  approach  that  can  be  used  to  determine 
the  Euler  axis  and  magnitude  of  the  alignment  error  when  com¬ 
pared  to  direction  cosine  matrices  because  the  online  computation 
of  eigenvalues  and  eigenvectors  and  the  associated  sign  ambiguities 
are  side  stepped. 

Figure  2  shows  a  block  diagram  of  the  baseline  ascent  attitude 
control  system  that  was  developed  in  this  work.  The  motivation  for 
the  design  is  that,  if  at  any  instant,  the  body-axis  angular  veloc¬ 
ity  vector  is  aligned  with  the  body  axis  to  desired  Euler  axis,  the 
body-axis  system  will  move  toward  the  desired-axis  system  thereby 
reducing  the  magnitude  of  the  attitude  error.  When  the  attitude  er¬ 
ror  (p  is  zero,  —  1  and  qb2d  =  [0  0  0]  as  can  be  deduced  from 
Eq.  (3). 

Note  from  Fig.  2  that  a  feasibility  test  result  from  the  control  allo¬ 
cation  block  can  modify  the  principle  attitude-error  gain.  As  will  be 
discussed  later,  a  two-branch  control  allocation  scheme  is  used  that 
either  minimizes  the  difference  between  the  desired  and  attainable 
body-axis  accelerations  or  drives  the  effectors  to  preferred  positions 
when  sufficient  control  power  exists.  The  former  case  is  referred  to 
as  a  control  deficiency  condition,  and  it  occurs  when  the  desired  ac¬ 
celerations  are  unattainable  due  to  effector  constraints  such  as  rate 
or  position  limits.  Typically  one  axis  will  saturate  first,  which  can 
produce  angular  velocity  vectors  that  are  not  aligned  with  the  Euler 
axis.  To  prevent  this  condition,  the  principle  attitude  error  gain  Kp 
is  reduced  when  any  one  of  the  commanded  accelerations  becomes 
infeasible  to  reduce  collectively  the  angular  velocity  commands. 
The  gain  is  bounded  by  0<  A'p  <  Kp^^,  where  Kp^^  is  the 
nominal  value  of  Kp.  The  gain  Kp  decreases  exponentially  toward 
zero  when  the  command  is  infeasible  and  increases  exponentially 
toward  Kp^  when  the  command  is  feasible.  The  rate  of  decay  or 
growth  is  governed  by  the  choice  of  the  constant  a,  which  was  set 
to  unity  in  this  application. 

III.  Dynamic  Inversion 

The  quaternion-based  outer-loop  control  system  generates  body- 
axis  angular  velocity  commands  Pc,  and  Tc  that  are  aligned  with 
the  error  Euler  axis.  The  inner-loop  dynamic  inversion  control  law 
is  designed  so  that  the  X-33  tracks  these  body-rate  commands.  The 
X-33  rotational  dynamics  can  be  written  as 

d;=/(a;,P)+g(P,c5)  (5) 


^0  +  +  ^2  +  ^3  =  ^  (2) 

A  body-to-desired  quaternion  qb2d  holds  information  about  the  di¬ 
rection  of  the  Euler  axis  in  its  vector  part  qb2d  and  information  about 
the  angular  misalignment  of  the  two  axis  systems  in  its  scalar  part 
<70A2d  •  The  scalar  and  vector  parts  of  the  body-to-desired  quaternion 
are  given  by 


where  LJ  =  [p  q  r]  and  P  denotes  measurable  or  estimable  quan¬ 
tities  that  influence  the  body-rate  states.  The  parameter  vector  P 
includes  variables  such  as  Mach  number,  angle  of  attack,  sideslip 
angle,  and  vehicle  mass  properties  such  as  moments  of  inertia. 
Equation  (5)  expresses  the  body-axis  rotational  accelerations  as  a 
sum  that  includes  control-dependent  accelerations  g{P,  6)  and  ac¬ 
celerations  that  are  due  only  to  the  base  engine  and  aerodynamics. 
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Fig.  2  Conceptual  block  diagram  of  quaternion-based  attitude  control  system  for  ascent. 


It  is  assumed  that  the  mass  properties  of  the  X-33  change  slowly 
when  compared  to  the  body-axis  rates  so  that  1^0  and 

cj  =  (Gb  -  cj  X  /w)  (6) 

where 


Gb  =  GBAE(t4^i  P)  +  Gaf/*,  <5)  — 

"L" 

M 

+ 

"L’ 

M 

_N_ 

BAE 

^N_ 

where  Gbae(<*^»^)  is  the  moment  generated  by  the  base  aerody¬ 
namics  and  engine  (BAE)  system  and  Gs  is  the  sum  of  the  moments 
produced  by  the  control  effectors.  Thus, 

/(a;,  P)  =  r^[GBAE(i^.  P)-LJX  ILJ]  (8) 

g(P,S)=r^GsiP.6)  (9) 

Dynamic  inversion  requires  that  the  control-dependent  portion  of 
the  model  be  affine  in  the  controls.  Therefore,  we  develop  a  linear 
approximation  of  the  control-dependent  part  such  that 

Gs{P.S)^GsiP)S  (10) 

The  X-33  aerodynamic  database  provides  force  and  moment  co¬ 
efficient  data  that  are  taken  at  a  moment  reference  point  (MRP), 
which  is  located  at  the  center  of  gravity  of  the  empty  vehicle,  that  is, 
no  fuel/oxidizer.  Control  derivative  information  was  extracted  from 
the  tables  in  the  database  for  Mach  numbers,  angles  of  attack,  and 
sideslip  angles  that  were  to  be  encountered  on  the  ascent  trajectory. 
Polynomial  fits  to  the  discrete  control  derivative  data  were  produced 
to  provide  continuous  estimates  of  GsiP)^  The  control  derivatives 
are  continuously  corrected  for  the  moving  center  of  gravity  as  the 
vehicle  ascends  using  the  following  relation: 

Gs(P)  =  +  (rMRP  -  ^cg)  X  P'smkp 

The  X-33  power  pack  is  an  XRS  2200  linear  aerospike  rocket 
engine.  This  engine  is  divided  into  four  sections:  port  upper  Al, 
port  lower  A2,  starboard  upper  B 1,  and  starboard  lower  B2,  These 
quadrants  can  be  differentially  throttled  to  generate  moments  that 


can  be  used  for  attitude  control.  This  differential  throttling  is  critical 
at  launch  because  the  aerodynamic  surfaces  are  ineffective  at  low 
dynamic  pressure.  The  engine  control  derivatives  are  estimated  by 
using  a  global  slope  approximation  that  simply  divides  the  estimated 
torque  produced  by  a  quadrant  by  the  actual  chamber  pressure  in 
that  quadrant.  For  example,  the  torque  gradient  of  the  upper  port 
quadrant  A 1  would  be  estimated  by 

^Gai  ^  Ga\ 

Pca\ 

The  engine  control  derivatives  are  also  corrected  for  the  moving 
c.g.  The  engine  torques  Ga\,  Gai^  and  Gbi  can  be  estimated 
by  feeding  chamber  pressure  commands  through  a  transfer  function 
model  of  the  engine  with  limits  to  estimate  the  actual  chamber  pres¬ 
sures.  The  engine  forces  and  moments  can  then  calculated  using 
a  table  lookup  model  parameterized  by  chamber  pressure,  mixti^e 
ratio,  and  pressure  ratio.  This  process  was  used  to  determine  a  sin¬ 
gle  average  estimate  of  the  engine  control  derivatives.  This  simple 
model  was  sufficient  to  provide  good  tracking  performance  over  a 
very  wide  range  of  flight  conditions. 

The  model  used  for  the  design  of  the  dynamic  inversion  control 
law  becomes 

d;=/(a;,P)  +  G5(P)(5  (13) 

and  our  objective  is  to  find  a  control  law  that  provides  direct  control 
over  u;  so  that  u)  —  tildes » is, 

Wdes=/(C^,^)  +  G5(P)<y  (14) 

Therefore,  the  inverse  control  must  satisfy 

=  (15) 

Because  there  are  more  control  effectors  than  controlled  vari¬ 
ables,  a  control  allocation  algorithm  must  be  used  to  obtain  a  unique 
solution.  Control  allocation  will  be  discussed  in  detail  in  the  next 
section.  There  are  12  control  effectors  that  may  be  used  on  ascent: 
inboard  and  outboard  elevons,  left  and  right  rudders,  body  flaps, 
and  chamber  pressures  of  the  four  quadrants  of  the  aerospike  en¬ 
gine.  Equation  (15)  states  that  the  control  effectors  are  to  be  used 
to  correct  for  the  difference  between  the  desired  accelerations  and 
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Fig.  3  Block  diagram  of  inner-loop  dynamic  inversion  control  law. 


Fig.  4  Implicit  model-following  implentation  using  prefilter  and  dy¬ 
namic  inversion. 


the  accelerations  due  only  to  the  base  engine  and  aerodynamic 
moments. 

When  the  loop  is  closed  around  the  aircraft,  as  shown  in  Fig.  3, 
and  sufficient  control  power  exists  such  that  Eq.  (15)  is  satisfied, 
the  transfer  function  matrix  should  approach  a  bank  of  decoupled 
integrators: 


(16) 


The  higher  the  fidelity  of  the  model  used  in  the  dynamic  inversion 
control  law,  the  more  the  closed-loop  system  will  behave  like  a 
decoupled  bank  of  integrators. 

A  command-shaping  prefilter  is  used  to  convert  commands  from 
the  outer-loop  attitude  controllers  and  into  acceleration 

commands  to  the  dynamic  inversion  control  law  pdes»  ^des»  and  rdcs- 
The  prefilter  structure  is  designed  to  provide  a  first-order  low-pass 
filter  response  for  each  command  variable  (CV)  (p,  q,  r)  to  de¬ 
sired  command  variable  signal  (CV™^)  (pc,  Qc,  r^).  The  combina¬ 
tion  of  prefilter  and  dynamic  inversion  produces  an  implicit  model - 
following  framework.  Figure  4  shows  a  block  diagram  of  the  prefilter 
that  is  used  for  each  axis. 

The  gain  Kb  can  be  interpreted  as  the  crossover  frequency  of  the 
loop  transfer  function.  Achieving  the  desired  closed-loop  dynamics 
is  critically  dependent  on  the  dynamic  inversion/control  allocation 
algorithm  successfully  producing  a  decoupled  bank  of  integrators. 
If  dynamic  inversion  is  perfect  the  closed-loop  transfer  function  for 
each  command  variable  becomes 


CV  \Kb 

CyCMD  -  J  ^ 


The  gain  Kb  must  be  selected  to  provide  sufficiently  high  band¬ 
width  tracking  without  over-driving  the  control  effectors.  If  the  dy¬ 
namic  inversion  and  control  allocation  are  perfect,  Eq.  (17)  could  be 
acheived  using  a  simple  gain  on  the  tracking  error.  Unfortunately, 
there  always  exists  some  modeling  error,  and  the  actuators  cannot 
respond  instantaneously  to  the  rate-  and  position-limited  command 
signals  generated  by  the  control  allocation  algorithm.  The  more 
complicated  prefilter  structure  provides  and  integral  action  on  the 
error  to  compensate  for  modeling  errors  and  to  improve  steady-state 
tracking  error  while  the  feedforward  structure  balances  the  lag  intro¬ 
duced  by  the  integral  compensation  to  maintain  phase  margin  near 
crossover. 

In  summary,  the  fundamental  objective  of  the  dynamic  inver¬ 
sion  control  law  is  to  provide  good  body  angular  rate  tracking.  The 
dynamic  inversion  and  model-following  architectures  will  be  aug¬ 
mented  with  direct  and  indirect  adaptive  control  algorithms  to  miti¬ 
gate  the  impact  of  uncertainties  and  to  compensate  for  damage  and 
failures. 


IV.  Control  Allocation 

There  are  3  controlled  variables  on  the  ascent  trajectory  and  12 
control  effectors;  therefore,  a  control  allocation  scheme  must  be  used 
to  ensure  that  Eq.  (15)  is  satisfied.  The  control  allocation  scheme 
used  in  this  case  draws  heavily  on  the  work  of  Buffington"^  and 
Buffington  et  al.^  The  control  allocation  problems  are  formulated 
as  linear  programs  (LPs).  The  LP  approach  minimizes  a  linear  per¬ 
formance  index  subject  to  linear  constraints.  Linear  inequality  con¬ 
straints  are  used  to  ensure  that  effector  rate  and  position  limits  are  not 
violated.  More  complex  engine  constraints  are  also  accommodated 
to  ensure  that  feasible  thrust  vectoring  commands  are  generated.  The 
control  allocation  problem  is  broken  down  into  a  control  deficiency 
branch  and  a  control  sufficiency  branch. 

Numerous  codes  exist  to  solve  such  problems.  The  widely  used 
LP -Solve  package  written  in  C  programming  language  was  used 
in  this  case  to  be  compatible  with  the  X-33  MAVERIC  simulation 
and  was  found  to  perform  well  in  many  cases;  however,  a  number 
of  Monte  Carlo  dispersion  runs  performed  by  a  NASA  Marshall 
Space  Flight  Center  evaluation  team  uncovered  several  cases  where 
the  LP-Solve  algorithm  failed  to  converge.  Up  to  20,000  linear  pro¬ 
gramming  problems  are  posed  and  solved  over  the  course  of  a  typ¬ 
ical  ascent  trajectory.  Occasionally  (approximately  1  in  100,000) 
one  of  these  problems  is  degenerate  and  fails  to  converge.  Inter¬ 
estingly,  these  degenerate  problems  can  be  solved  by  some  linear 
programming  packages  and  not  others.  At  the  present  time,  there  are 
obviously  serious  flight  certification  and  implementation  issues  as¬ 
sociated  with  optimization-based  online  control  allocation,  but  the 
benefits  are  great,  and  these  issues  will  undoubtedly  be  resolved  in 
time.  Some  of  the  solvers  that  have  been  capable  of  solving  these 
degenerate  problems  remain  to  be  integrated  into  the  MAVERIC 
simulation.  New  fast  and  reliable  LP-based  online  control  alloca¬ 
tion  methods  are  being  developed^®  and  may  also  eliminate  these 
deficiencies. 

Control  Deficiency  Branch 

The  control  deficiency  branch  is  used  to  test  feasibility  of  satis¬ 
fying  Eq.  (15).  For  convenience  we  will  refer  to  the  left-hand  side 
of  Eq.  (15)  as  : 

di..  =  Wdes  -/(w,  P)  =  Gs(P)S  =  BS  (18) 

If  it  is  not  feasible  to  obtain  rfdes  =  due  to  control  effector  con¬ 
straints,  then  the  difference  between  the  desired  and  actual  effector- 
induced  body-axis  accelerations  is  minimized.  Thus,  the  objective 
can  be  summarized  in  terms  of  minimizing  a  l-norm  performance 
index  subject  to  constraints: 

minJB  =  ||B(5  —  rfdeslli,  subject  to  S  <  6  <6  (19) 

where  S  and  6  are  the  most  restrictive  lower  bounds  and  upper 
bounds  on  the  control  effector  deflection.  Here, 

S  =  min(J„,  ATSr  +  (5),  S  =  max(<5/, -AT Sr  +  S)  (20) 

where  Su  is  the  upper  position  limit  vector.  Si  is  the  lower  posi¬ 
tion  limit  vector,  and  AT  is  the  inner-loop  flight  control  system 
update  rate.  The  optimization  problem  posed  in  Eq.  (19)  may  be 
transformed  into  the  following  linear  programming  problem: 

mm  =  /£,  =  [0  •  •  ♦  0  1  •  •  •  1] 

'  -(5.  ]  r  0 

S  S 

subject  to  —S  <  —S  (21) 

BS  -  Ss  rfdes 

-BS  -  (5  J  [-rfdes^ 

where  Ss  is  of  the  same  dimension  as  the  set  of  controlled  vari¬ 
ables.  If  7/)  =  0,  then  the  commanded  controlled  variable  rates  are 
achievable,  and  there  may  be  excess  control  power  available  that  can 
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be  used  to  optimize  subobjectives.  If  J  ^0,  the  commanded  con¬ 
trolled  variable  rates  are  not  achievable,  and  the  control  allocation 
algorithm  provides  a  vector  of  effector  commands  that  minimizes 
the  deficiency. 


Control  Sufficiency  Branch 

If  there  is  sufficient  control  power  available  such  that 
then  there  may  be  excess  control  power  available  to  optimize  a 
subobjective.  The  subobjective  could  involve  driving  the  control 
effectors  to  a  preferred  position  Sp.  A  performance  index  reflecting 
this  objective  is  given  by 

mmJs  =  \\WsiS-6p)h 

subject  to  B6  =  rfdcs.  S  <S  <S  (22) 


where  Ws  is  a  vector  that  allows  one  to  weight  one  preference  over 
another.  This  optimization  problem  can  be  cast  into  the  LP  frame¬ 
work  as  follows: 


min  —  Js  Sg 


subject  to 


-Ss 

s 

-6 

S-^Ss 

-S-Ss 


0 

6 

-s 

-S, 


BS  =  ddcs  (23) 


where  S,  SgySp,  and  Ws  are  of  the  same  dimension  as  the  number 
of  control  effectors.  The  preference  vector  Sp  is  used  in  this  case  to 
decorrelate  the  control  effectors  to  enable  online  system  identifica¬ 
tion  of  the  control  effectiveness  matrix  B. 


Null-Space  Injection 

The  indirect  adaptive  portion  of  the  control  law  requires  online 
identification  of  the  control  effectiveness  matrix  B.  This  enables 
the  control  law  to  compensate  for  failures,  damage,  or  modeling 
errors  throughout  the  flight.  To  identify  elements  of  the  control  ef¬ 
fectiveness  matrix,  each  control  effector  must  be  active  at  all  times. 
Furthermore,  each  effector  must  be  moving  independently  so  that 
there  is  no  correlation  between  the  movement  of  one  control  effector 
and  another.  Decorrelated  control  deflections  are  necessary  to  obtain 
a  well-conditioned  regressor  matrix  for  system  identification.  One 
way  of  doing  this  is  to  provide  dithered  effector  commands  that  con¬ 
sist  of  an  additive  random  signal  that  is  superimposed  on  the  nominal 
effector  command.  Unfortunately,  this  simple  approach  results  in 
degraded  vehicle  response  because  in  general  B(^  +  <5dithcr)  ^  ^dcs- 
The  solution  is  to  provide  a  dithering  signal  that  lies  in  the  null 
space  of  the  B,  that  is,  B<5dithcr  =  so  that  B(<5  +  cJdithcr)  =  ^dcs-  This 
can  be  accomplished  indirectly  by  randomly  perturbing  the  control 
effector  preference  vector  accorcUng  to 

<5p  =  W-'B^(BW'"'B^)"'ddes  (24) 

where 

W  =  WWr ,  Wr  =  diag(10^' ,  10^ , . . . ,  10^" )  (25) 

and  V  is  a  vector  of  uniformly  distributed  random  variables  between 
-1  and  1.  The  matrix  W  is  a  nominal  diagonal  weighting  matrix 
used  for  scaling  purposes  to  distribute  commands  equally.  Note  that 
Sp  is  actually  the  solution  to  a  weighted  least-squares  problem: 

min  J  =  S^WS,  subject  to  BS  =  rfdcs  (26) 
s 

Thus,  the  preference  vector  will  be  driven  toward  a  randomly 
weighted  least- squares  solution  to  the  control  allocation  problem 
that  does  not  account  for  rate  and  position  constraints.  Now  the  pref¬ 
erence  vector  Sp  is  randomly  changing,  and  the  sufficiency  branch 
of  the  LP-based  control  allocation  ensures  that  B(5  =  rfdcs  and  that  the 
control  effector  constraints  are  not  violated.  This  approach  ensures 


Time  (sec) 

Fig.  5  Attitude  tracking  using  dynamic  inversion/null-space  injection 
control  allocation. 


Fig.  6  Attitude  tracking  using  dynamic  inversion/minimum  deflection 
control  allocation. 


that  the  control  effectors  are  decorrelated  and  active  without  de¬ 
grading  the  vehicle  response.  This  approach  also  avoids  the  explicit 
calculation  of  the  null  space  of  B . 

Figure  5  shows  the  response  of  the  body  flaps  and  the  track¬ 
ing  performance  of  the  X-33  operating  in  the  null- space  injection 
mode.  One  can  see  that  the  flaps  are  quite  active  and  decorrelated 
while  the  tracking  performance  is  well  behaved.  Figure  6  shows 
the  flap  response  and  tracking  performance  of  the  X-33  operat¬ 
ing  with  minimum-deflection  control  allocation.  The  differences 
between  the  null-space  injection  mode  and  the  minimum  deflec¬ 
tion  mode  can  easily  be  seen.  In  the  minimum  deflection  mode, 
some  of  the  effectors  are  completely  inactive,  for  example,  rud¬ 
ders,  while  others  are  highly  correlated,  for  example,  flap.  The 
vehicle  tracking  performance  is  good  as  well.  In  general  it  is  more 
advantageous  to  operate  in  the  minimum  deflection  mode  due  to 
the  lower  energy  requirements;  therefore,  the  null-space  injection 
mode  is  only  turned  on  when  a  fault  is  detected  and  system  iden¬ 
tification  is  required.  The  fault  detection  scheme  will  be  discussed 
later. 
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Fig.  7  Attitude  tracking  using  dynamic  inversion/nuH-space  injection  control  allocation. 


Fig.  8  Body-rate  tracking  using  dynamic  inversion/null-space  injection  control  allocation. 


y.  Baseline  Dynamic  Inversion  Results 

The  baseline  attitude  control  system  shown  in  Figs.  2-4  was  im¬ 
plemented  in  the  MAVERIC  simulation  of  the  X-33.  The  desired 
roll,  pitch,  and  yaw  bandwidths  were  set  to  —  and  the  prin¬ 
cipal  attitude  error  proportional  gain  was  set  lo  Kp  —  \.  Null-space 
injection  control  allocation  was  implemented  using  LP  techniques 
and  was  used  to  excite  and  decorrelate  the  control  effectors  without 
degrading  the  vehicle  response.  The  commanded  and  actual  Euler 
angles  for  the  ascent  trajectory  are  shown  in  Fig.  7.  One  can  see  that 
the  X-33  tracks  the  commanded  attitude  quite  well.  The  stepped 
nature  of  the  commanded  attitude  is  a  result  of  the  slower  (1-Hz) 
update  rate  of  the  guidance  system  when  compared  to  the  inner-loop 
flight  control  system  (50  Hz). 

The  performance  of  the  dynamic  inversion  control  law  can  be 
more  fairly  evaluated  by  comparing  the  body-rate  commands  to 


the  actual  body  rates.  Figure  8  makes  this  comparison.  The  actual 
body  rates  ideally  should  look  like  those  of  the  model  or  low-pass 
filtered  command  signals  according  to  Eq.  (17).  It  can  be  seen  that 
the  actual  roll  and  yaw  rates  follow  the  commands  very  closely, 
which  indicates  that  the  inversion  is  nearly  perfect  in  these  two  axes. 
Small  short-term  differences  appear  when  comparing  commanded 
pitch  response  to  the  actual  response,  which  indicates  that  some 
pitch-axis  modeling  information  is  inaccurate.  The  differences  are 
slight,  however,  and  do  not  significantly  impact  the  attitude  tracking 
performance,  as  can  be  seen  in  Fig.  7.  The  appearance  of  high- 
frequency  noise  in  the  pitch  response  is  caused  by  the  modeling 
error  in  the  control  effectiveness  matrix  and  null-space  injection. 
Integration  of  an  online  system  identification  algorithm  will  reduce 
the  modeling  error  and  allow  the  control  allocation  to  adapt  to  control 
effector  failures  or  damage. 


7 


DOMAN  AND  NGO 


281 


Figure  9  shows  the  commanded  and  actual  Euler  angles  for  an 
ascent  trajectory,  where  one  of  the  turbopumps  fails  causing  a  50% 
loss  of  engine  thrust.  This  result  was  obtained  without  modification 
to  the  baseline  control  law  other  than  reducing  the  differential  throt¬ 
tle  commands  by  50%.  Note  that  the  system  performs  quite  well 
with  no  large  transients  at  the  time  of  the  failure. 

The  baseline  control  law  operates  quite  well  over  the  entire  as¬ 
cent  trajectory,  which  covers  a  very  wide  range  of  flight  conditions. 
The  vehicle  is  launched  vertically  and  accelerates  to  approximately 
Mach  9.5  at  180,000  ft.  The  vehicle  center  of  gravity  moves  ap¬ 
proximately  4m  as  the  mass  of  the  vehicle  changes  from  285,000 
to  79,000  Ibm  in  about  3  min.  Note  that  this  control  law  does  not 
use  gain  scheduling  and  does  not  require  linear  models  of  the  ve¬ 
hicle  over  the  flight  envelope  for  synthesis.  The  control  law  simply 
requires  access  to  the  nonlinear  vehicle  model  parameters  and  es¬ 
timates  of  the  vehicle  states  as  the  flight  progresses.  The  control 
design  would  be  better  described  as  model  scheduled  because  a  ve¬ 
hicle  model  is  required  and  the  control  law  is  explicitly  written  in 
terms  of  the  model  parameters.  This  approach  has  a  distinct  advan¬ 
tage  over  traditional  gain-scheduling  techniques  because  a  series  of 
tuned  classical  or  modem  control  designs  does  not  have  to  be  per¬ 
formed  if  the  vehicle  model  is  improved  or  a  new  trajectory  must  be 
flown.  New  vehicle  configurations  can  be  flown  without  changing 
the  control  system  architecture  or  generating  a  new  gain  schedule. 


Only  the  new  a  priori  estimates  of  the  model  parameters  must  be 
loaded  into  the  flight  control  law. 

VI.  Online  System  Identification 

In  the  event  of  control  effector  damage  or  failures,  a  static  ap¬ 
proach  to  online  system  identification  proposed  by  Chandler  et  al.^ 
and  Buffington  et  is  used  to  estimate  the  vehicle’s  changing  con¬ 
trol  derivatives.  The  newly  updated  control  derivatives  are  then  used 
by  the  dynamic  inversion  control  law  to  track  the  attitude  guidance 
commands.  The  static  identification  approach  provides  a  direct,  non¬ 
iterative  solution.  Prior  information  about  the  system,  such  as  the  a 
priori  knowledge  of  the  effectiveness  of  the  control  surfaces,  can  be 
included  in  the  identification  algorithm  in  the  form  of  stochastic  con¬ 
straints  for  better  estimates  of  these  values.  The  control  derivative 
estimates  can  also  be  improved  by  lengthening  the  data  window. 

For  the  example  in  this  paper,  a  control  surface  failure  occurs 
when  the  X-33’s  entire  right  flap  8i  is  lost  at  time  equal  to  20  s, 
rendering  its  control  derivatives  in  the  pitch,  roll,  and  yaw  axes 
zero.  The  static  identification  method  is  used  to  estimate  the  control 
derivatives  of  the  remaining  effectors  in  all  three  axes.  Without  loss 
of  generality,  the  following  discussion  will  focus  on  the  estimation 
of  the  roll  control  derivatives  , . . . ,  P5,2  of  the  X-33’s  12  control 
effectors  5i, . . . ,  5i2.  This  procedure  given  in  the  roll  axis  can  then 
be  extended  to  consider  the  remaining  pitch  and  yaw  axes. 
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The  modeled  roll  acceleration  equation  of  motion  in  the  stability 
axis  is 

P  =  PpP  +  Prr  +  PpP  +  PpqPq  +  Ph,^\  +  •  •  • 

+  Phn^ii  +  lUp  +  higher-order  terms  (27) 

The  rolling  acceleration  coefficients  due  to  side  slip  /S,  yaw  rate  r, 
roll  rate  p,  and  pitch  rate  ^  are  p^,  Pr,  Pp,  and  p^,  respectively. 
The  roll  acceleration  coefficients  due  to  the  12  control  effectors 
,  5i2  are  p^j , . . . ,  respectively.  The  measurement  noise 

is  Wp. 

To  estimate  the  new  control  derivatives,  we  first  remove  con¬ 
tributions  of  the  side  slip,  pitch  rate,  roll  rate,  yaw  rate,  and  the 
higher-order  terms  from  Eq.  (27): 

p  =  p  -  [ppP  Prr  +  PpP  +  PpqPq  +  higher-order  terms] 


=  H - V 

Concatenating  k  sampled  measurements  in  Eq.  (28),  we  have  a  data 
window  of  length  k.  Setting  n  =  12,  the  number  of  control  effectors, 
we  have 


P\ 

hi  • 

••  K 

+ 

Wp, 

Jk^ 

Jh 

82^  • 

'  ’  _ 

_P&n  _ 

J^Pk_ 

(29) 


Compactly,  Eq.  (29)  can  be  written  as 

Z  =  //0-f  W 


where  Z  is  a  x  1  vector  of  measured  roll  accelerations  due  to 
the  control  effectors.  //  is  a  A:  x  n  regressor  matrix  of  measured 
control  surface  deflections.  The  n  x  1  vector  ©  is  the  rolling  moment 
coefficient  to  be  estimated.  W  is  the  system  sensor  noise.  The  /i  x  1 
vector  W  is  the  stochastic  process  of  zero  mean  with  the  covariance 
R{0)  —  r(0)4.  The  minimum-variance  estimate^  ©mv  of  ©  is  then 

The  standard  of  deviation  of  the  estimate  ©  is  then 
a  =  yl(ZJZ)/(k-n) 

where  Z  =  Z  —  //©  is  the  return  difference.  The  corresponding  co- 
variance  Pmv  of  the  estimate  ©mv  is 

A  priori  knowledge  of  parameters  to  be  estimated,  such  as  the  values 
of  rolling  moments  of  the  unfailed  aircraft  obtained  from  experimen¬ 
tal  tests,  can  be  used  at  this  point  to  obtain  a  mixed  estimate  of  the 
minimum- variance  estimate  and  a  priori  values.  The  a  priori  values 
©a priori  with  their  associated  covariance  Q  become  the  stochastic 
constraint  on  the  final  mixed  estimate  ©me  and  its  covariance: 

®me  “  ®mv  “b  ^ mv(^ mv  “b  l2)  (®apriori  ®mv) 

^mc  =  [I  P mv(^ mv  “b  Q.y\P mv 

In  calculating  the  mixed  estimate  ©me,  the  A  x  n  moving  data  win¬ 
dow  H  is  updated  by  replacing  the  earliest  values  of  the  control 
surface  deflections  with  their  latest  values.  The  same  is  done  for 
the  A  X  1  vector  Z  of  the  roll  accelerations.  Finally,  the  mixed  es¬ 
timate  results  ©me  are  low-pass  filtered  (first  order  with  15-rad/s 
bandwidth)  to  smooth  out  the  final  results. 

In  the  following  example,  we  apply  the  preceding  identification 
method  to  estimate  the  control  derivatives  of  the  X-33’s  12  control 
effectors  with  a  complete  loss  of  the  right  flap  8\  at  20  s.  The  vehicle 
has  1 2  control  effectors  to  generate  the  pitching,  rolling,  and  yawing 
moments.  These  control  effectors  consist  of  eight  aerodynamic  con¬ 
trol  surfaces:  left  and  right  body  flaps  3i  and  ^2,  left  and  right  rudders 


^3  and  ($4,  left  and  right  inboard  elevons  65  and  ^6,  as  well  as  left  and 
right  outboard  elevons  8q  and  8%.  The  vehicle’s  propulsion-based 
control  effectors  include  the  left  and  right  top  engine  quadrants  ^9 
and  5 10  and  the  left  and  right  bottom  engine  quadrants  and  5 12, 
repectively.  Because  of  their  large  size  and  locations,  the  body  flaps 
are  the  most  effective  of  the  eight  aerocontrol  surfaces.  The  engine 
quadrants,  however,  are  the  most  effective  of  all  12  control  effectors. 
The  uncertainties  associated  with  the  control  effectivess  parameters 
are  directly  reflected  in  their  covariances.  The  uncertainties  can  de¬ 
pend  on  the  flight  conditions  and  the  quality  of  the  experimental  data. 
The  covariance  of  the  effectors  ’  a  priori  rolling  accelerations  are  cho¬ 
sen  to  ber(5i)  =  r(52)  =  0.01  and  r(<53)  =  •  •  •  =:r(58)  —  0.001  and 
r(59)  =  •  •  •  =:  r(5i2)  =0.0001.  Because  of  their  large  effectiveness 
relative  to  the  other  aerocontrol  surfaces  and  the  airflow  interaction 
on  their  large  surfaces,  the  covariance  of  the  a  priori  estimates  of  the 
body-flap  control  effectiveness  parameters  are  chosen  to  be  larger 
than  those  of  the  the  less  effective  aerocontrol  surfaces.  The  covari¬ 
ances  associated  with  the  engine  quadrants  are  chosen  to  be  smaller 
than  those  of  the  aerocontrol  surfaces  because  the  propulsive  forces 
generated  by  the  engine  are  less  uncertain. 

Figure  7  shows  the  nominal  performance  of  the  vehicle  under  no 
failure.  With  the  loss  of  the  right  flap  and  without  the  online  system 
identification,  the  controller  fails  to  adapt  to  the  changing  rolling 
moments;  thus,  it  is  unable  to  track  the  guidance  commands,  as  seen 
in  Fig.  10.  Under  failure  and  with  online  system  identification,  one 
can  see  that  the  controller  is  able  to  track  the  guidance  commands. 
The  value  of  the  mixed  estimate  of  the  right  flap  rolling  control 
derivative  is  shown  in  Fig.  1 1 .  It  is  observed  that  rapid  variation  of  the 
right  flap’s  control  derivative  estimate  is  caused  by  the  change  in  the 
slope  of  the  roll  command.  The  sensitivity  of  the  right  flap’s  estimate 
to  the  roll  command  can  be  reduced  by  choosing  a  slower  filter. 
Furthermore,  at  lower  dynamic  pressure,  the  aerocontrol  effectors 
(5i , . . . ,  ^8  are  less  effective.  This  occurs  for  time  greater  than  150  s. 
The  rolling  accelerations  produced  by  the  aeroeffectors  are,  thus, 
small  in  Eq.  (28),  whereas  the  engine  differential  throttle  effectors 

^9 . 5 12  are  large.  This  difference  in  the  effectiveness  among  the 

vehicle’s  effectors  causes  wide  fluctuations  in  the  estimates  of  the 
aeroeffectors’  control  derivative. 

In  Fig.  10,  the  right  flap  failure  occurs  20  s  into  flight,  and  the 
vehicle  begins  to  depart  at  approximately  110  s.  The  ability  of  the 
vehicle  to  remain  stable  for  the  next  70  s  with  a  missing  right  body 
flap  and  no  system  identification  can  be  attributed  to  the  following 
two  reasons. 

First,  the  propulsion-based  effectors  play  dominant  roles  in  main¬ 
taining  the  vehicle’s  ability  to  track  the  guidance  command,  although 
the  aerocontrols  are  also  important  as  evidenced  in  the  departure 
of  the  failed  vehicle  later  in  the  flight.  Initially,  any  increases  in 
the  tracking  errors  due  to  the  missing  body  flap  are  fedback  and 
compensated  by  the  other  control  effectors,  mainly  the  four  engine 
quadrants.  When  only  the  nominal  information  about  the  failed  ve¬ 
hicle  is  used,  the  control  allocation  scheme  is  able  to  distribute  the 
control  deflection  commands.  Stability  and  good  tracking  perfor¬ 
mance  are  then  achieved  as  long  as  the  remaining  control  effectors 
are  not  saturated. 

Second,  as  fuel  is  expended  during  the  ascent  flight,  the  vehicle’s 
center  of  gravity  migrates  toward  the  front  of  the  vehicle  causing 
a  change  in  the  vehicle  dynamics.  Consequently,  the  aerocontrol 
effectors  become  more  effective  in  controlling  the  vehicle  due  to 
their  lengthening  moment  arms.  The  stabilizing  roles  of  the  aero¬ 
control  effectors,  therefore,  become  more  important.  Without  the 
knowledge  of  the  failed  vehicle  dynamics  and  its  control  effective¬ 
ness,  the  control  allocation  algorithm  fails  to  distribute  properly 
the  commanded  control  forces  and  moments  among  the  remaining 
functional  control  effectors,  resulting  the  departure  of  the  vehicle. 

In  Fig.  11,  the  parameters  being  estimated  are  the  rolling  mo¬ 
ments  generated  by  the  left  and  right  body  flaps.  They  are 
fully  dimensionalized  and  not  normalized  by  the  dynamic  pressure 
q.  TTie  a  priori  values  of  the  roll  derivatives  are  the  outputs  of  a 
polynominal  fit  of  the  experimental  data  that  depend  on  the  vehi¬ 
cle’s  angle  of  attack,  sideslip  angle,  altitude,  and  velocity.  The  roll 
control  derivative  of  the  left  body  flap  is  underestimated  compared 
to  its  a  priori  values.  The  roll  control  derivative  of  the  missing  right 
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Fig.  10  Attitude  tracking  performance  with  lost  right  flap. 


Fig.  11  Estimates  of  left  and  (failed)  right  flaps  roll  control  derivatives  (identification  on  at  20  s). 


body  flap  fluctuates  about  the  zero  value  as  expected.  Exact  match¬ 
ing  of  the  roll  control  derivatives  to  the  a  priori  value  for  the  left 
body  flap  and  zero  for  the  missing  right  body  flap  may  be  difficult  to 
obtain  because  these  parameters  vary  within  the  data  window.  These 
estimation  errors  are  compensated  by  the  robustness  of  the  dynamic 
inversion  control  law.  The  overall  control  law  is  shown  in  Fig.  12. 

There  are  three  classes  of  actuation  failures  being  considered: 

1)  In  the  locked  actuator  class,  the  failed  actuator  remains  in  a 
fixed  position  regardless  of  the  command  input  to  the  device.  As  a 
result,  constant  pitching,  rolling,  and  yawing  moments  are  induced. 
Furthermore,  the  regressor  matrix  is  singular  because  the  matrix 
column  corresponding  to  the  locked  actuator  is  zero. 
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Fig.  12  Overall  control  law. 
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Fig.  13  Fault  detection  logic. 


2)  In  the  floating  actuator  case,  the  actuator  position  floats  with 
the  angle  of  attack  of  the  vehicle.  Its  control  effectiveness  is,  thus, 
zero.  A  loss  of  power  or  hydraulic  pressure  is  the  main  cause  of  such 
a  failure. 

3)  The  third  class  is  damaged  aerosurface.  Although  the  actuator 
is  in  proper  working  order,  damage  to  the  vehicle  aerocontrol  surface 
is  sustained.  A  fractional  loss  of  the  effector’s  surface  area  results 
in  a  proportional  reduction  in  its  control  effectiveness. 

The  algorithm  used  to  detect  the  three  actuation  failure  scenarios 
contains  the  following  parameters: 

1)  Response  error  thresholds  are  used  for  actuation  failure  de¬ 
tection.  The  response  of  the  vehicle  such  as  its  pitch,  roll,  and  yaw 
accelerations  are  constantly  monitored  and  compared  with  those  of 
the  ideal,  onboard  model  of  the  vehicle.  Under  an  actuation  fail¬ 
ure,  the  magnitudes  of  response  differences  increase  and  exceed  the 
preset  error  thresholds.  Small  error  thresholds  are  used  when  the 
vehicle  model  is  of  high  fidelity,  whereas  large  error  thresholds  are 
necessary  to  avoid  false  alarms  when  the  vehicle  model  is  inaccurate. 

2)  A  second  parameter  on  which  the  fault  detection  algorithm 
depends,  response  error  persistency,  is  the  uninterrupted  time  du¬ 
ration  during  which  the  response  errors  exceed  their  thresholds. 
The  fidelity  of  the  ideal  model  determines  how  we  set  the  persis¬ 
tency  threshold  for  the  response  error.  Longer  persistencies  of  the 
response  errors  are  used  when  the  vehicle  model  contains  greater 
uncertainties.  In  this  way,  false  alarms  can  be  further  avoided. 

3)  The  third  parameter  is  the  time  length  of  the  data  window. 
Once  the  response  errors  have  exceeded  their  thresholds  and  per¬ 
sisted  for  the  required  time,  null-space  injection  is  activated.  Vehicle 
response  and  its  actuator  position  data  are  then  collected  for  use  in 
the  identification  algorithm.  The  length  of  the  moving  data  window 
determines  how  many  data  points  will  be  collected.  System  iden¬ 
tification  takp''  place  only  after  the  moving  data  window  is  full.  A 
temporal  separation  between  the  time  when  null-space  injection  is 
activated  and  the  time  when  the  system  identification  estimates  the 
vehicle  parameters  is  enforced.  The  temporal  separation  is  equal  to 
the  time  length  of  the  data  window. 

When  the  three  conditions  are  not  met,  such  as  during  nomi¬ 
nal  flight  conditions  or  after  system  estimates  have  been  made  and 
the  damaged  vehicle  response  errors  have  been  brought  below  the 
threshold,  the  most  recent  mixed  estimate  of  control  effectiveness 
matrix  is  used.  Figure  13  details  the  detection  algorithm  architecture. 

The  primary  purpose  of  the  detection  algorithm  is  to  avoid  un¬ 
necessary  computations  and  minimize  control  usage  by  activating 
null-space  injection  and  system  identification  only  when  a  fault 
occurs. 

VII.  Conclusions 

A  control  architecture  for  the  X-33  has  been  presented  to  demon¬ 
strate  the  feasibility  of  applying  adaptive/reconfigurable  control 


technologies  developed  for  fighter  aircraft  to  RLVs.  A  baseline  dy¬ 
namic  inversion  control  law  with  null- space  injection  control  al¬ 
location  demonstrated  good  attitude  tracking  capability  over  the 
entire  ascent  trajectory.  This  baseline  control  architecture  is  well 
suited  for  the  insertion  of  direct  and  indirect  adaptive  control  el¬ 
ements  to  improve  the  fault  tolerance  of  these  high-speed  flight 
vehicles.  Dynamic  inversion  allows  designers  to  modify  the  con¬ 
trol  law  easily  when  vehicle  configurations  change  or  when  more 
accurate  aerodynamic  data  become  available.  The  designer  simply 
updates  the  model  parameters  (tables,  curve  fits,  etc.),  and  the  con¬ 
trol  law  synthesis  is  complete.  Stability  and  robustness  analyses 
should  still  be  performed;  however,  a  completed  redesign  of  a  tradi¬ 
tional  trajectory-dependent  gain-scheduled  launch  vehicle  control 
law  is  not  necessary.  The  resulting  control  law  can  reduce  mis¬ 
sion  design  time  because  it  is  trajectory  independent.  Although  the 
control  law  was  demonstrated  for  the  ascent  flight  phase  only,  the 
technique  is  general  enough  to  cover  the  full  flight  envelope  of 
such  vehicles.  The  online  system  identification  module  has  been 
integrated  into  the  simulation  and  has  been  tested  on  a  limited 
basis. 
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